ip6_nd_mirror_proxy.c

Go to the documentation of this file.

/*
 * Copyright (c) 2021 Cisco and/or its affiliates.
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at:
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
 
#include <vlib/vlib.h>
 
#include <vnet/vnet.h>
#include <vnet/ethernet/ethernet.h>
#include <vnet/feature/feature.h>
#include <vnet/ip/ip6_packet.h>
#include <vnet/ip-neighbor/ip6_neighbor.h>
#include <vnet/ip-neighbor/ip_neighbor.h>
#include <vnet/ip-neighbor/ip_neighbor_dp.h>
#include <vnet/ip6-nd/ip6_nd_inline.h>
#include <vnet/fib/ip6_fib.h>
#include <vnet/ip/ip6_ll_table.h>
 
#include <vppinfra/error.h>
 
int
ip6_nd_proxy_enable_disable (u32 sw_if_index, u8 enable)
{
 
  if (enable)
    {
      vnet_feature_enable_disable ("ip6-unicast", "ip6-unicast-nd-proxy",
                                   sw_if_index, 1, NULL, 0);
      vnet_feature_enable_disable ("ip6-multicast", "ip6-multicast-nd-proxy",
                                   sw_if_index, 1, NULL, 0);
    }
  else
    {
      vnet_feature_enable_disable ("ip6-unicast", "ip6-unicast-nd-proxy",
                                   sw_if_index, 0, NULL, 0);
      vnet_feature_enable_disable ("ip6-multicast", "ip6-multicast-nd-proxy",
                                   sw_if_index, 0, NULL, 0);
    }
  return 0;
}
 
static clib_error_t *
set_int_ip6_nd_proxy_command_fn (vlib_main_t *vm, unformat_input_t *input,
                                 vlib_cli_command_t *cmd)
{
  vnet_main_t *vnm = vnet_get_main ();
  u32 sw_if_index;
  int enable = 0;
 
  sw_if_index = ~0;
 
  while (unformat_check_input (input) != UNFORMAT_END_OF_INPUT)
    {
      if (unformat (input, "%U", unformat_vnet_sw_interface, vnm,
                    &sw_if_index))
        ;
      else if (unformat (input, "enable"))
        enable = 1;
      else if (unformat (input, "disable"))
        enable = 0;
      else
        break;
    }
 
  if (~0 == sw_if_index)
    return clib_error_return (0, "unknown input '%U'", format_unformat_error,
                              input);
 
  ip6_nd_proxy_enable_disable (sw_if_index, enable);
 
  return 0;
}
 
VLIB_CLI_COMMAND (set_int_ip6_nd_proxy_enable_command, static) = {
  .path = "set interface ip6-nd proxy",
  .short_help = "set interface ip6-nd proxy <intfc> [enable|disable]",
  .function = set_int_ip6_nd_proxy_command_fn,
};
 
typedef struct
{
  u8 is_multicast;
  u32 sw_if_index;
} vnet_ip6_nd_proxy_trace_t;
 
static u8 *
format_ip6_nd_proxy_trace (u8 *s, va_list *args)
{
  CLIB_UNUSED (vlib_main_t * vm) = va_arg (*args, vlib_main_t *);
  CLIB_UNUSED (vlib_node_t * node) = va_arg (*args, vlib_node_t *);
  vnet_main_t *vnm = vnet_get_main ();
  vnet_ip6_nd_proxy_trace_t *t = va_arg (*args, vnet_ip6_nd_proxy_trace_t *);
  u32 indent = format_get_indent (s);
 
  if (t->is_multicast)
    s = format (s, "%U %U multicast ", format_white_space, indent,
                format_vnet_sw_if_index_name, vnm, t->sw_if_index);
  else
    s = format (s, "%U %U unicast ", format_white_space, indent,
                format_vnet_sw_if_index_name, vnm, t->sw_if_index);
 
  return s;
}
 
static_always_inline void
ip6_nd_proxy_unicast (vlib_main_t *vm, vlib_node_runtime_t *node,
                      vlib_buffer_t *b0, ip6_header_t *ip6, u32 *next0)
{
  if (PREDICT_FALSE (ip6->protocol == IP_PROTOCOL_ICMP6))
    {
      icmp46_header_t *icmp0;
      icmp6_type_t type0;
 
      icmp0 = ip6_next_header (ip6);
      type0 = icmp0->type;
      if (type0 == ICMP6_neighbor_solicitation ||
          type0 == ICMP6_neighbor_advertisement)
        {
          icmp6_neighbor_solicitation_or_advertisement_header_t *icmp6_nsa;
          icmp6_neighbor_discovery_ethernet_link_layer_address_option_t
            *icmp6_nd_ell_addr;
          u32 sw_if_index0;
 
          icmp6_nsa = (void *) icmp0;
          icmp6_nd_ell_addr = (void *) (icmp6_nsa + 1);
 
          sw_if_index0 = vnet_buffer (b0)->sw_if_index[VLIB_RX];
 
          /* unicast neighbor solicitation */
          fib_node_index_t fei;
          u32 fib_index;
 
          fib_index = ip6_fib_table_get_index_for_sw_if_index (sw_if_index0);
 
          if (~0 == fib_index)
            {
              *next0 = ICMP6_NEIGHBOR_SOLICITATION_NEXT_DROP;
            }
          else
            {
              if (ip6_address_is_link_local_unicast (&ip6->dst_address))
                {
                  fei = ip6_fib_table_lookup_exact_match (
                    ip6_ll_fib_get (sw_if_index0), &ip6->dst_address, 128);
                }
              else
                {
                  fei = ip6_fib_table_lookup_exact_match (
                    fib_index, &ip6->dst_address, 128);
                }
 
              if (FIB_NODE_INDEX_INVALID != fei)
                {
                  *next0 = ICMP6_NEIGHBOR_SOLICITATION_NEXT_REPLY;
                  icmp6_send_neighbor_advertisement (
                    vm, b0, ip6, icmp6_nsa, icmp6_nd_ell_addr, sw_if_index0);
                }
            }
          if (b0->flags & VLIB_BUFFER_IS_TRACED)
            {
              vnet_ip6_nd_proxy_trace_t *t;
              t = vlib_add_trace (vm, node, b0, sizeof (t[0]));
              t->sw_if_index = sw_if_index0;
              t->is_multicast = 0;
            }
        }
    }
}
 
static_always_inline void
ip6_nd_proxy_multicast (vlib_main_t *vm, vlib_node_runtime_t *node,
                        vlib_buffer_t *b0, ip6_header_t *ip6, u32 *next0)
{
  if (PREDICT_FALSE (ip6->protocol == IP_PROTOCOL_ICMP6))
    {
      icmp46_header_t *icmp0;
      icmp6_type_t type0;
 
      icmp0 = ip6_next_header (ip6);
      type0 = icmp0->type;
      if (type0 == ICMP6_neighbor_solicitation ||
          type0 == ICMP6_neighbor_advertisement)
        {
          icmp6_neighbor_solicitation_or_advertisement_header_t *icmp6_nsa;
          icmp6_neighbor_discovery_ethernet_link_layer_address_option_t
            *icmp6_nd_ell_addr;
          u32 sw_if_index0;
 
          icmp6_nsa = (void *) icmp0;
          icmp6_nd_ell_addr = (void *) (icmp6_nsa + 1);
 
          sw_if_index0 = vnet_buffer (b0)->sw_if_index[VLIB_RX];
          if (type0 == ICMP6_neighbor_solicitation)
            {
              if (
                (icmp6_nd_ell_addr->header.type ==
                 ICMP6_NEIGHBOR_DISCOVERY_OPTION_source_link_layer_address) &&
                (!ip6_address_is_unspecified (&ip6->src_address)) &&
                (!ip6_address_is_link_local_unicast (&ip6->src_address)))
                {
                  ip_neighbor_learn_t learn = { .sw_if_index = sw_if_index0,
                                                .ip = {
                                                  .version = AF_IP6,
                                                  .ip.ip6 = ip6->src_address,
                                                } };
                  clib_memcpy (&learn.mac, icmp6_nd_ell_addr->ethernet_address,
                               sizeof (learn.mac));
                  ip_neighbor_learn_dp (&learn);
 
                  *next0 = ICMP6_NEIGHBOR_SOLICITATION_NEXT_REPLY;
                  icmp6_send_neighbor_advertisement (
                    vm, b0, ip6, icmp6_nsa, icmp6_nd_ell_addr, sw_if_index0);
                }
            }
          else // type0 = ICMP6_neighbor_advertisement
            {
              icmp6_neighbor_solicitation_or_advertisement_header_t
                *icmp6_nsa = (void *) icmp0;
              icmp6_neighbor_discovery_ethernet_link_layer_address_option_t
                *icmp6_nd_ell_addr = (void *) (icmp6_nsa + 1);
              if (
                (icmp6_nd_ell_addr->header.type ==
                 ICMP6_NEIGHBOR_DISCOVERY_OPTION_target_link_layer_address) &&
                (!ip6_address_is_unspecified (&ip6->src_address)) &&
                (!ip6_address_is_link_local_unicast (&ip6->src_address)))
                {
                  ip_neighbor_learn_t learn = { .sw_if_index = sw_if_index0,
                                                .ip = {
                                                  .version = AF_IP6,
                                                  .ip.ip6 =
                                                    icmp6_nsa->target_address,
                                                } };
                  clib_memcpy (&learn.mac, icmp6_nd_ell_addr->ethernet_address,
                               sizeof (learn.mac));
                  ip_neighbor_learn_dp (&learn);
 
                  *next0 = ICMP6_NEIGHBOR_SOLICITATION_NEXT_DROP;
                }
            }
 
          if (b0->flags & VLIB_BUFFER_IS_TRACED)
            {
              vnet_ip6_nd_proxy_trace_t *t;
              t = vlib_add_trace (vm, node, b0, sizeof (t[0]));
              t->sw_if_index = sw_if_index0;
              t->is_multicast = 1;
            }
        }
    }
}
 
static_always_inline uword
ip6_nd_proxy_node_inline (vlib_main_t *vm, vlib_node_runtime_t *node,
                          vlib_frame_t *frame, u8 is_multicast)
{
  u32 n_left_from, *from, *to_next;
  u32 next_index, n_left_to_next;
  vlib_buffer_t *bufs[VLIB_FRAME_SIZE], **b = bufs;
 
  from = vlib_frame_vector_args (frame);
  n_left_from = frame->n_vectors;
  next_index = node->cached_next_index;
 
  vlib_get_buffers (vm, from, bufs, n_left_from);
 
  while (n_left_from > 0)
    {
      vlib_get_next_frame (vm, node, next_index, to_next, n_left_to_next);
 
      while (n_left_from > 4 && n_left_to_next > 2)
        {
          ip6_header_t *ip6_0, *ip6_1;
          u32 next0, next1;
          u32 bi0, bi1;
 
          /* Prefetch next iteration. */
          {
            vlib_prefetch_buffer_header (b[2], LOAD);
            vlib_prefetch_buffer_header (b[3], LOAD);
 
            vlib_prefetch_buffer_data (b[2], LOAD);
            vlib_prefetch_buffer_data (b[3], LOAD);
          }
 
          /*
           * speculatively enqueue b0 and b1 to the current next frame
           */
          to_next[0] = bi0 = from[0];
          to_next[1] = bi1 = from[1];
          to_next += 2;
          n_left_to_next -= 2;
 
          vnet_feature_next (&next0, b[0]);
          vnet_feature_next (&next1, b[1]);
 
          ip6_0 = vlib_buffer_get_current (b[0]);
          ip6_1 = vlib_buffer_get_current (b[1]);
 
          if (is_multicast)
            {
              ip6_nd_proxy_multicast (vm, node, b[0], ip6_0, &next0);
              ip6_nd_proxy_multicast (vm, node, b[1], ip6_1, &next1);
            }
          else
            {
              ip6_nd_proxy_unicast (vm, node, b[0], ip6_0, &next0);
              ip6_nd_proxy_unicast (vm, node, b[1], ip6_1, &next1);
            }
          vlib_validate_buffer_enqueue_x2 (vm, node, next_index, to_next,
                                           n_left_to_next, bi0, bi1, next0,
                                           next1);
 
          b += 2;
          from += 2;
          n_left_from -= 2;
        }
 
      while (n_left_from > 0 && n_left_to_next > 0)
        {
          ip6_header_t *ip6_0;
          u32 next0, bi0;
 
          /* speculatively enqueue b0 to the current next frame */
          to_next[0] = bi0 = from[0];
          to_next += 1;
          n_left_to_next -= 1;
 
          vnet_feature_next (&next0, b[0]);
          ip6_0 = vlib_buffer_get_current (b[0]);
 
          if (is_multicast)
            ip6_nd_proxy_multicast (vm, node, b[0], ip6_0, &next0);
          else
            ip6_nd_proxy_unicast (vm, node, b[0], ip6_0, &next0);
 
          vlib_validate_buffer_enqueue_x1 (vm, node, next_index, to_next,
                                           n_left_to_next, bi0, next0);
          b += 1;
          from += 1;
          n_left_from -= 1;
        }
      vlib_put_next_frame (vm, node, next_index, n_left_to_next);
    }
 
  return frame->n_vectors;
}
 
VLIB_NODE_FN (ip6_unicast_nd_proxy_node)
(vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
{
  return ip6_nd_proxy_node_inline (vm, node, frame, 0 /* is_multicast */);
}
 
VLIB_REGISTER_NODE (ip6_unicast_nd_proxy_node) = {
  .vector_size = sizeof (u32),
  .format_trace = format_ip6_nd_proxy_trace,
  .type = VLIB_NODE_TYPE_INTERNAL,
  .n_errors = 0,
  .n_next_nodes = ICMP6_NEIGHBOR_SOLICITATION_N_NEXT,
  .next_nodes = {
    [ICMP6_NEIGHBOR_SOLICITATION_NEXT_DROP] = "ip6-drop",
    [ICMP6_NEIGHBOR_SOLICITATION_NEXT_REPLY] = "interface-output",
  },
  .name = "ip6-unicast-nd-proxy",
};
 
VLIB_NODE_FN (ip6_multicast_nd_proxy_node)
(vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
{
  return ip6_nd_proxy_node_inline (vm, node, frame, 1 /* is_multicast */);
}
 
VLIB_REGISTER_NODE (ip6_multicast_nd_proxy_node) = {
  .vector_size = sizeof (u32),
  .format_trace = format_ip6_nd_proxy_trace,
  .type = VLIB_NODE_TYPE_INTERNAL,
  .n_errors = 0,
  .n_next_nodes = ICMP6_NEIGHBOR_SOLICITATION_N_NEXT,
  .next_nodes = {
    [ICMP6_NEIGHBOR_SOLICITATION_NEXT_DROP] = "ip6-drop",
    [ICMP6_NEIGHBOR_SOLICITATION_NEXT_REPLY] = "interface-output",
  },
  .name = "ip6-multicast-nd-proxy",
};
 
VNET_FEATURE_INIT (ip6_unicast_nd_proxy_node, static) = {
  .arc_name = "ip6-unicast",
  .node_name = "ip6-unicast-nd-proxy",
  .runs_before = VNET_FEATURES ("ip6-lookup"),
};
 
VNET_FEATURE_INIT (ip6_multicast_nd_proxy_node, static) = {
  .arc_name = "ip6-multicast",
  .node_name = "ip6-multicast-nd-proxy",
  .runs_before = VNET_FEATURES ("ip6-mfib-forward-lookup"),
};
 
/*
 * fd.io coding-style-patch-verification: ON
 *
 * Local Variables:
 * eval: (c-set-style "gnu")
 * End:
 */